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Dependence on Cyberspace 
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Looking Ahead . . . Looking Back 



Waves of IT Industry Growth in the Information Age 
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Looking Ahead . . . Looking Back 
(alternate story) 



Bringing Civilization to its Knees... 
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Paradigm Shift 









Are you a Starfish or a SpiderP 
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Starfish 

■ Peered 

■ Adaptive 

■ Resilient 

Spider 

■ Hierarchical 

■ Resists Change 

■ Fragile 
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Cyber Risk Management 



Cyber 







Time & Environment 



Information 




Content & Services 






Identity 




Individuals, Organizations, 
Equipment 






Balancing Operational Needs against Security 








Vignette: The Recapture of Fallujah 
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Vignette: World War II Cryptography 




iii.VJi.t^T^ra^ 






im ti m m ■ ■ 







Shift in Strategic Focus 



FROM 


HHHH TO HH^H 


• Protect Information 


• Ensure Operational Success 


• Static Pre-Placed Defenses 


• Dynamic Network and 
Information Operations 


• Proprietary Point Solutions 


• Policy-Based Enterprise 


• People Intensive 


• Integrated Services 


• Fragile Information 
Technology 


• Resilient Cyber Ecosystem 







Toward a Resilient Cyber Ecosystem 



(a 

</> 
O 
U 
U 



(0 



CD 

i_ 

3 
U 
<D 
(/) 



Resilient 
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s) 



Reactive & 
Manual 

Security 
administrators follow 

rules and do their 
best to "put out fires" 



Tools-Based 

Tools and 

technologies are 

applied piecemeal 

to assist people in 

reacting faster 



Speed of Action 
Interoperable 

Loosely integrated 

tools exchange data to 

assist people with 

cyber situational 

awareness 



2) 

Policy-Based 

The enterprise 

instantiates 

security policy, 

illuminates events and 

helps the operators 

find, fix, and target for 

response 
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Resilient 

Enterprise optimizes 

service to user by to 

dynamically isolating 

and containing effects - 

including in supply 

chain and underlying 

infrastructure 




Trends, Challenges, and Opportunities 



• Strengthen Network Underpinnings 

• Assure Software & Systems 

• Managing Attack Surfaces 

• Reducing Anonymity 

• Improving Cyber Awareness 

• Automating Security Content 

• Mission Based Architectures 








7/ 

m f 
ill 



It's not just about technology 



National Centers of Academic Excellence 
in Information Assurance Education 

106 Colleges & Universities 
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The US Cyber Challenge - discover, train and 
recruit the best talent in the country 








Culture Change fur Cyberspace 
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